All Detections

HackTool - RemoteKrbRelay Execution

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 20251018

Detects the use of RemoteKrbRelay, a Kerberos relaying tool via CommandLine flags and PE metadata.

Sigma